Florence Blanc-Renaud 517964f746 Report missing certificate in external trust chain ...

When ipa-server-install is called with an external CA, but the cert chain is
incomplete, the command exits with the following error:
ERROR CA certificate chain in <list of --external-cert-file> is incomplete

The fix adds in the log the name of the missing certificate:
ERROR    CA certificate chain in <list of --external-cert-file> is incomplete: missing certificate with subject '<dn of the missing certificate>'

https://fedorahosted.org/freeipa/ticket/5792

Reviewed-By: Jan Cholasta <jcholast@redhat.com>

2016-06-23 07:36:57 +02:00

..

plugins

DNS Locations: dnsserver: put server_id option into named.conf

2016-06-17 15:22:24 +02:00

server

Replica promotion: use the correct IPA domain for replica

2016-06-21 17:09:06 +02:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrustinstance.py

Fix possibly undefined variable in ipa_smb_conf_exists()

2016-06-20 20:49:35 +02:00

bindinstance.py

delegate removal of master DNS record and replica keys to separate functions

2016-06-17 18:55:19 +02:00

ca.py

DNS Locations: use dns_update_service_records in installers

2016-06-17 15:22:24 +02:00

cainstance.py

replica-install: configure key retriever before starting Dogtag

2016-06-15 07:13:38 +02:00

certs.py

Increased certmonger timeout

2016-06-20 19:36:45 +02:00

custodiainstance.py

Allow CustodiaClient to be used by arbitrary principals

2016-06-08 10:16:28 +02:00

dns.py

DNS Locations: use dns_update_service_records in installers

2016-06-17 15:22:24 +02:00

dnskeysyncinstance.py

delegate removal of master DNS record and replica keys to separate functions

2016-06-17 18:55:19 +02:00

dogtaginstance.py

ipaplatform: Move remaining user/group constants to ipaplatform.constants.

2016-03-23 13:32:55 +01:00

dsinstance.py

Increase nsslapd-db-locks to 50000

2016-06-15 18:14:02 +02:00

httpinstance.py

Configure httpd service from installer instead of directly from RPM

2016-04-22 10:19:25 +02:00

installutils.py

Report missing certificate in external trust chain

2016-06-23 07:36:57 +02:00

ipa_backup.py

Move user/group constants for PKI and DS into ipaplatform

2016-03-22 10:40:44 +01:00

ipa_cacert_manage.py

cacert install: fix trust chain validation

2016-02-24 09:22:59 +01:00

ipa_kra_install.py

Incorrect message when KRA already installed

2016-05-20 16:17:54 +02:00

ipa_ldap_updater.py

Remove unused imports

2015-12-23 07:59:22 +01:00

ipa_otptoken_import.py

pylint: supress false positive no-member errors

2016-03-02 14:57:36 +01:00

ipa_replica_prepare.py

replica-prepare: do not add PTR records if there is no IPA managed reverse zone

2016-04-19 17:07:12 +02:00

ipa_restore.py

ipa_restore: Import only FQDN from ipalib.constants

2016-03-23 10:08:02 +01:00

ipa_server_certinstall.py

Remove unused imports

2015-12-23 07:59:22 +01:00

ipa_server_upgrade.py

Remove unused imports

2015-12-23 07:59:22 +01:00

ipa_winsync_migrate.py

fix incorrect name of ipa-winsync-migrate command in help

2016-03-02 12:52:14 +01:00

kra.py

Modify error message to install first instance of KRA

2015-12-02 17:21:32 +01:00

krainstance.py

Move user/group constants for PKI and DS into ipaplatform

2016-03-22 10:40:44 +01:00

krbinstance.py

Fix kdc.conf.template to use ipaplatform.paths.

2016-03-23 13:35:29 +01:00

ldapupdate.py

fix upgrade: wait for proper DS socket after DS restart

2016-02-23 17:35:20 +01:00

memcacheinstance.py

Use absolute imports

2015-08-12 18:17:23 +02:00

ntpinstance.py

Add NTP to the list of services stored in IPA masters LDAP subtree

2016-06-15 13:51:48 +02:00

odsexporterinstance.py

ipaplatform: Move remaining user/group constants to ipaplatform.constants.

2016-03-23 13:32:55 +01:00

opendnssecinstance.py

Use ODS_USER/ODS_GROUP in opendnssec_conf.template

2016-03-23 13:32:55 +01:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

ipa-replica-manage: use server_del when removing domain level 1 replica

2016-06-17 18:55:19 +02:00

schemaupdate.py

Server Upgrade: fix traceback caused by cidict

2015-09-03 14:11:52 +02:00

service.py

Fixes CA always being presented as running

2016-06-15 18:11:28 +02:00

sysupgrade.py

Remove wildcard imports

2015-12-23 07:59:22 +01:00

upgradeinstance.py

Remove wildcard imports

2015-12-23 07:59:22 +01:00